What Is Claimed Is: 



1 . A method for communicating cryptographic data through multiple 
network layers, comprising: 

receiving the cryptographic data at a node; 
dividing the cryptographic data into multiple pieces; and 
encapsulating different pieces of the cryptographic data in fields associated 
with different network layers in a data packet, whereby cryptographic data that is 
too large to be communicated in a single field can be communicated through 
multiple fields associated with different network layers. 

2. The method of claim 1, wherein receiving the cryptographic data 
involves performing at least one non-reversible function on a piece of input data 
to produce the cryptographic data. 

3. The method of claim 2, wherein the input data includes a public 
key associated with the node. 

4. The method of claim 2, wherein the input data includes a static 
identifier associated with the node. 

5. The method of claim 2, wherein an IPv6 address field of the data 
packet is comprised of a 64-bit prefix followed by the most-significant 64 bits of 
the output of the non-reversible function, and wherein a universal/local bit and an 
individual/group bit of the IPv6 address are both set to "0". 

6. The method of claim 5, wherein a SIP Call-ID field of the data 
packet is comprised of a local-id and a host address, wherein 
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the local-id is comprised of the least-significant 128 bits of the output of 
the non-reversible function; and wherein 

the host address is comprised of the IPv6 address. 

7. The method of claim 2, wherein an SSH public-key fingerprint 
field of the data packet is comprised of the least-significant 128 bits of the output 
of the non-reversible function. 

8. The method of claim 2, wherein a MAC address field of the data 
packet is comprised of the least-significant 64 bits of the output of the non- 
reversible function. 

9. The method of claim 2, wherein a JXTA Peer-ID field of the data 
packet is comprised of the least-significant 128 bits of the output of the non- 
reversible function. 

10. The method of claim 2, wherein a JXTA Group-ID field of the data 
packet is comprised of the least-significant 128 bits of the output of the non- 
reversible function. 

11. An apparatus for communicating cryptographic data through 
multiple network layers, comprising: 

a receiving mechanism configured to receive the cryptographic data at a 

node; 

a dividing mechanism configured to divide the cryptographic data into 
multiple pieces; and 

an encapsulation mechanism configured to encapsulate different pieces of 
the cryptographic data in fields associated with different network layers in a data 
packet, whereby cryptographic data that is too large to be communicated in a 
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single field can be communicated through multiple fields associated with different 
network layers. 



12. The apparatus of claim 1 1 , wherein the receiving mechanism is 
configured to perform at least one non-reversible function on a piece of input data 
to produce the cryptographic data. 

13. The apparatus of claim 1 2, wherein the input data includes a public 
key associated with the node. 

14. The apparatus of claim 12, wherein the input data includes a static 
identifier associated with the node. 

1 5. The apparatus of claim 12, wherein an IPv6 address field of the 
data packet is comprised of a 64-bit prefix followed by the most-significant 64 
bits of the output of the non-reversible function, and wherein a universal/local bit 
and an individual/group bit of the IPv6 address are both set to "0". 

5 

16. The apparatus of claim 15, wherein a SIP Call-ID field of the data 
packet is comprised of a local-id and a host address, wherein 

the local-id is comprised of the least-significant 128 bits of the output of 
the non-reversible function; and wherein 
5 the host address is comprised of the IPv6 address. 

17. The apparatus of claim 12, wherein an SSH public-key fingerprint 
field of the data packet is comprised of the least-significant 128 bits of the output 
of the non-reversible function. 
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1 8. The apparatus of claim 12, wherein a MAC address field of the 
data packet is comprised of the least-significant 64 bits of the output of the non- 
reversible function. 

19. The apparatus of claim 12, wherein a JXTA Peer-ID field of the 
data packet is comprised of the least-significant 128 bits of the output of the non- 
reversible function. 

20. The apparatus of claim 12, wherein a JXTA Group-ID field of the 
data packet is comprised of the least-significant 128 bits of the output of the non- 
reversible function. 

21. A computer system for communicating cryptographic data through 
multiple network layers, comprising: 

a central processing unit; 
a semiconductor memory; 
5 a receiving mechanism configured to receive the cryptographic data at a 

node; 

a dividing mechanism configured to divide the cryptographic data into 
multiple pieces; and 

an encapsulation mechanism configured to encapsulate different pieces of 
10 the cryptographic data in fields associated with different network layers in a data 
packet; 

whereby cryptographic data that is too large to be communicated in a 
single field can be communicated through multiple fields associated with different 
network layers. 

15 
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22. The computer system of claim 2 1 , wherein the receiving 
mechanism is configured to perform at least one non-reversible function on a 
piece of input data to produce the cryptographic data. 

23. The computer system of claim 22, wherein the input data includes 
a public key associated with the node. 

24. The computer system of claim 22, wherein the input data includes 
a static identifier associated with the node. 

25. The computer system of claim 22, wherein an IPv6 address field of 
the data packet is comprised of a 64-bit prefix followed by the most-significant 64 
bits of the output of the non-reversible function, and wherein a universal/local bit 
and an individual/group bit of the IPv6 address are both set to "0". 

26. The computer system of claim 25, wherein a SIP Call-ID field of 
the data packet is comprised of a local-id and a host address, wherein 

the local-id is comprised of the least-significant 128 bits of the output of 
the non-reversible function; and wherein 

the host address is comprised of the IPv6 address. 

27. The computer system of claim 22, wherein an SSH public-key 
fingerprint field of the data packet is comprised of the least-significant 128 bits of 
the output of the non-reversible function. 

28. The computer system of claim 22, wherein a MAC address field of 
the data packet is comprised of the least-significant 64 bits of the output of the 
non-reversible function. 
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29. The computer system of claim 22, wherein a JXTA Peer-ID field 
of the data packet is comprised of the least-significant 128 bits of the output of the 
non-reversible function. 

30. The computer system of claim 22, wherein a JXTA Group-ID field 
of the data packet is comprised of the least-significant 128 bits of the output of the 
non-reversible function. 

31. A method for verifying a data packet containing cryptographic 
data, comprising: 

receiving the data packet; 

extracting pieces of cryptographic data from fields associated with 
different network layers within the data packet; and 

verifying that each piece of extracted cryptographic data matches with a 
corresponding portion of a piece of previously obtained cryptographic data. 

32. The method of claim 3 1 , wherein the previously obtained 
cryptographic data is obtained through a process that involves performing at least 
one non-reversible function on a piece of input data to produce the cryptographic 
data. 

33. An apparatus for verifying a data packet containing cryptographic 
data, comprising: 

a receiving mechanism configured to receive the data packet; 

an extracting mechanism configured to extract pieces of cryptographic 
data from fields associated with different network layers within the data packet; 
and 
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a verification mechanism configured to verify that each piece of extracted 
cryptographic data matches with a corresponding portion of a piece of previously 
obtained cryptographic data. 

34. The apparatus of claim 33, wherein the previously obtained 
cryptographic data is obtained through a process that involves performing at least 
one non-reversible function on a piece of input data to produce the cryptographic 
data. 

35. A computer system for verifying a data packet containing 
cryptographic data, comprising: 

a central processing unit; 
a semiconductor memory; 

a receiving mechanism configured to receive the data packet; 

an extracting mechanism configured to extract pieces of cryptographic 
data from fields associated with different network layers within the data packet; 
and 

a verification mechanism configured to confirm that each piece of 
extracted cryptographic data matches with a corresponding portion of a piece of 
previously obtained cryptographic data. 

36. The computer system of claim 35, wherein the previously obtained 
cryptographic data is obtained through a process that involves performing at least 
one non-reversible function on a piece of input data to produce the cryptographic 
data. 
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